Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/y4E2H5GK8GAAFpIK5C81rjalKWE.roa
File: y4E2H5GK8GAAFpIK5C81rjalKWE.roa (raw, json)
Hash identifier: WQuO1vmSW944/EwL9R/3CD4GiLSLWYQtwqFVPMVvDz4=
Subject key identifier: CB:81:36:1F:91:8A:F0:60:00:16:92:0A:E4:2F:35:AE:36:A5:29:61
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018357A0F901695E39A3AB6EAA16FDA122AD
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/y4E2H5GK8GAAFpIK5C81rjalKWE.roa
Signing time: Mon 19 Sep 2022 21:21:50 +0000
ROA not before: Mon 19 Sep 2022 21:21:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 193.39.209.0/24 maxlen: 24
194.33.62.0/24 maxlen: 24
193.41.69.0/24 maxlen: 24
193.41.68.0/24 maxlen: 24
193.41.86.0/24 maxlen: 24
45.146.129.0/24 maxlen: 24
45.130.254.0/24 maxlen: 24
80.253.248.0/24 maxlen: 24
103.59.42.0/24 maxlen: 24
103.59.43.0/24 maxlen: 24
103.59.40.0/24 maxlen: 24
103.59.41.0/24 maxlen: 24
91.212.120.0/24 maxlen: 24
45.13.187.0/24 maxlen: 24
45.145.59.0/24 maxlen: 24
103.74.77.0/24 maxlen: 24
103.74.76.0/24 maxlen: 24
85.209.131.0/24 maxlen: 24
194.41.38.0/24 maxlen: 24
193.41.39.0/24 maxlen: 24
45.157.37.0/24 maxlen: 24
45.157.39.0/24 maxlen: 24
45.147.31.0/24 maxlen: 24
2a07:7885::/32 maxlen: 32
2a0f:39c2::/32 maxlen: 32
2a0f:39c1::/32 maxlen: 32
2a07:7884::/32 maxlen: 32
2a07:7887::/32 maxlen: 32
2a0f:e840::/32 maxlen: 32
2a0f:39c6::/32 maxlen: 32
2a0f:39c3::/32 maxlen: 32
2a0f:39c0::/32 maxlen: 32
2a07:7881::/32 maxlen: 32
2a07:7882::/32 maxlen: 32
2a0f:39c5::/32 maxlen: 32
2a0f:39c4::/32 maxlen: 32
2a0f:39c7::/32 maxlen: 32
2a07:7886::/32 maxlen: 32
2a07:7883::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:57:a0:f9:01:69:5e:39:a3:ab:6e:aa:16:fd:a1:22:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 19 21:21:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cb81361f918af0600016920ae42f35ae36a52961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:21:00:cc:62:16:00:a1:96:22:7e:cd:a4:e3:
72:04:e3:ca:a8:e3:c5:f3:41:ed:30:d3:f8:18:19:
f2:73:03:f1:1e:fe:5b:61:f3:2a:ac:3d:64:04:bd:
d5:77:00:ba:4e:2d:29:ef:07:f1:42:58:78:f7:7d:
07:2b:70:af:5e:0b:04:ed:0f:58:42:b5:fb:ec:0c:
63:b8:79:1b:6d:8f:78:04:f7:0e:96:f1:73:0e:5c:
4b:7d:b2:88:95:95:62:8f:fd:76:1d:53:5e:5a:2e:
a1:35:75:1d:eb:31:2d:bc:20:21:89:7c:49:3a:e0:
2c:9e:70:c1:bb:08:75:3e:0b:29:cd:dd:f4:84:90:
89:63:c1:a8:4d:4b:7b:95:21:b3:57:f8:5a:ee:e1:
fa:f2:fb:d9:1b:70:23:38:03:b5:52:f1:6b:12:d3:
78:09:4d:e2:10:cd:eb:db:82:d4:dc:36:31:12:af:
8c:ea:53:66:e9:d9:4b:e3:e9:09:3c:80:1f:bd:6b:
7b:9f:47:3e:02:9e:b9:a8:74:12:d6:2d:89:d0:88:
1c:d2:b2:b3:cc:7f:02:1e:00:b9:cf:21:70:8b:0b:
c6:33:e9:37:10:bf:f1:4d:4e:13:e6:ba:50:95:d4:
9d:79:38:04:6f:37:cb:ab:a4:86:b8:e6:6a:8e:71:
d7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:81:36:1F:91:8A:F0:60:00:16:92:0A:E4:2F:35:AE:36:A5:29:61
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/y4E2H5GK8GAAFpIK5C81rjalKWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.187.0/24
45.130.254.0/24
45.145.59.0/24
45.146.129.0/24
45.147.31.0/24
45.157.37.0/24
45.157.39.0/24
80.253.248.0/24
85.209.131.0/24
91.212.120.0/24
103.59.40.0/22
103.74.76.0/23
193.39.209.0/24
193.41.39.0/24
193.41.68.0/23
193.41.86.0/24
194.33.62.0/24
194.41.38.0/24
IPv6:
2a07:7881::-2a07:7887:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:39c0::/29
2a0f:e840::/32
Signature Algorithm: sha256WithRSAEncryption
10:90:3d:8b:ed:a3:4d:f1:5e:8c:84:c5:ae:f7:e5:aa:8b:b0:
d3:ca:7b:e2:74:96:9d:07:e7:c9:a2:38:ac:ac:75:e5:5d:cb:
8b:14:fa:31:48:79:5e:c7:be:45:de:3e:c1:6f:43:8a:c0:b5:
86:74:a0:45:0d:bd:13:2b:67:38:2e:ba:11:aa:e2:83:c1:22:
96:10:1d:f7:4e:97:4a:66:2a:7f:fa:3f:d5:03:38:6b:1f:79:
fd:f2:0a:d2:ec:28:23:68:26:42:de:17:78:24:d1:39:a5:5d:
4f:90:cc:55:84:65:11:a0:3a:a7:92:d5:c4:30:b3:fe:18:40:
69:dc:de:a4:76:7d:5a:37:56:90:61:2b:ca:6b:13:09:e5:2f:
e5:dd:25:d8:b8:ce:f1:99:b4:4c:25:12:80:d3:21:48:05:96:
51:4c:d6:77:29:ac:4f:cf:93:73:92:e0:ba:dd:6e:42:13:de:
fb:20:53:9e:ab:1b:2c:03:5c:a7:41:eb:e7:43:be:7e:17:a1:
e3:89:26:0d:ef:2e:46:15:b9:ef:78:59:ee:f0:fa:be:89:8b:
79:7e:a8:18:04:03:e0:9e:66:1f:5d:d9:44:a0:39:e5:e0:77:
7d:c3:ec:a9:49:ad:d8:db:99:eb:54:70:14:71:5f:fb:fc:9e:
74:cc:fa:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:21:18 2025 by rpki-client